View Issue Details

This issue affects 1 person(s).
 258
IDProjectCategoryView StatusLast Update
20643Bug reportsSecuritypublic2026-08-11 11:50
Reportermoontan Assigned Toc_schmitz  
PrioritynoneSeverityminor 
Status closedResolutionunable to reproduce 
Product Version7.0.x 
Summary20643: Users with account passwords containing special characters cannot log in.
Description

It's possible to create user accounts with passwords containing special characters but log-in is only possible with alphanumeric passwords. I just saw that v7.0.8 is out and I am currently waiting for the upgrade to finish to see if it fixes the problem. (I don't have Comfort Update or SSH access though, so the FTP upload will still take a while)

Steps To Reproduce

Steps to reproduce

Create two new users when logged in as admin. Make sure one user's password contains at least one special character and the other's is strictly alphanumeric. Log out and attempt to log in as the newly created users one by one.

Expected result

Successful log-in for both users.

Actual result

Log-in fails for the user with the password containing special character(s).
Log-in is successful for the user with the alphanumeric password.

Tagsaccess, login, password, security, users
Bug heat258
Complete LimeSurvey version number (& build)7.0.7+260729
I will donate to the project if issue is resolvedNo
BrowserFirefox, Chrome
Database type & version10.11.18-MariaDB-0+deb12u1-log
Server OS (if known)Debian 12
Webserver software & version (if known)Linux hosting 6.1.0-50-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.176-1 (2026-07-02) x86_64
PHP Version8.2.32
Git branch / Pull Request URL

Users monitoring this issue

moontan

Activities

tibor.pacalat

tibor.pacalat

2026-08-10 12:13

administrator   ~85411

Can you provide example password that is an issue? I managed to create and then log in with an admin that has exclamation mark (!) in their password.

c_schmitz

c_schmitz

2026-08-11 11:50

administrator   ~85414

I am sorry but we are unable to reproduce the issue.
We also have no other reports of any other users, so we have to assume that it something local to your installation or handling.
Therefore I will close this issue.

Issue History

Date Modified Username Field Change
2026-08-10 12:00 moontan New Issue
2026-08-10 12:00 moontan Issue Monitored: moontan
2026-08-10 12:00 moontan Bug heat 250 => 252
2026-08-10 12:13 tibor.pacalat Note Added: 85411
2026-08-10 12:13 tibor.pacalat Bug heat 252 => 254
2026-08-10 13:55 moontan Tag Attached: password
2026-08-10 13:55 moontan Tag Attached: access
2026-08-10 13:55 moontan Tag Attached: login
2026-08-10 13:55 moontan Tag Attached: security
2026-08-10 13:55 moontan Tag Attached: users
2026-08-10 17:48 c_schmitz Assigned To => c_schmitz
2026-08-10 17:48 c_schmitz Status new => feedback
2026-08-10 18:31 moontan Bug heat 254 => 256
2026-08-10 18:31 moontan Status feedback => assigned
2026-08-11 11:50 c_schmitz Status assigned => closed
2026-08-11 11:50 c_schmitz Resolution open => unable to reproduce
2026-08-11 11:50 c_schmitz Note Added: 85414
2026-08-11 11:50 c_schmitz Bug heat 256 => 258